🔒 Privacy Policy  Updated: January 2026 🛡️ mbi23  256-bit SSL encryption for all your personal data 🚫 No Data Selling  mbi23 does not sell or share your data with third parties 📋 PDPA Compliant  Full compliance with the Malaysian Personal Data Protection Act ✅ Your Rights  Access, amend, or delete your data at any time 💬 Contact Us  support@mbi23.xyz for any privacy-related enquiries 🔒 Privacy Policy  Updated: January 2026 🛡️ mbi23  256-bit SSL encryption for all your personal data 🚫 No Data Selling  mbi23 does not sell or share your data with third parties 📋 PDPA Compliant  Full compliance with the Malaysian Personal Data Protection Act ✅ Your Rights  Access, amend, or delete your data at any time 💬 Contact Us  support@mbi23.xyz for any privacy-related enquiries
  1. Home
  2. Privacy Policy
🔒 mbi23 PRIVACY POLICY

Mbi23 Privacy Policy – Our Commitment Protecting Malaysian Players' Personal Data

Your privacy is our priority. This document clearly explains how mbi23 collects, uses, stores, and protects your personal data — as well as the rights you hold as a member of our platform. We believe transparency is the foundation of the trust you place in mbi23.

Last updated: 1 January 2026
256
SSL Encryption Bits
0
Data Sales
PDPA
MY Compliance
24/7
Privacy Support

Introduction – Why Your Privacy Matters to mbi23

When you register an account at mbi23 and start using our platform, you are entrusting us with your personal information. That trust is something we take seriously. From the phone number you used to register, to your deposit transaction records made via Touch 'n Go eWallet or DuitNow — every piece of data you share with us is protected using the latest encryption technology and handled responsibly in accordance with the policy set out on this page.

This mbi23 Privacy Policy is written in plain, straightforward language — not the kind of dense legal jargon designed to make you click "Agree" without reading a word. We want you to genuinely understand what we do with your data, why we need it, and what rights you have over your own personal information. This transparency is central to mbi23's core values as a platform that puts its members first.

This Privacy Policy applies to all users of the mbi23 platform, including the website at mbi23.xyz, the mobile app (where available), and all related services. It should be read together with Terms & Conditions mbi23 forms part of the overall agreement between you and mbi23. By using the mbi23 platform, you agree to the practices described in this Privacy Policy.

Mbi23 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the collection and use of personal data in Malaysia. This means you have legally protected rights over your personal data, and mbi23 is fully obligated to uphold those rights.

Mbi23's Six Privacy Commitments

The principles that guide how we handle your personal data

🔒
Multi-Layer Encryption for All Data
All personal data and payment information transmitted between your device and mbi23's servers is protected with 256-bit SSL encryption. Data stored in our databases is also encrypted using additional encryption standards, keeping your data secure even in the event of an unauthorised access attempt.
SSL 256-bit
🚫
No Sale of Data to Third Parties
mbi23 has never sold, rented, or disclosed your personal data to third parties for marketing or commercial purposes — and we never will. Your data is used solely for purposes directly related to the mbi23 services you use, and nothing beyond that without your explicit prior consent.
Your Data, Your Rights
📋
Full Malaysia PDPA Compliance
All of mbi23's data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This ensures that your rights as a data subject are protected by law, and that mbi23 has a legal obligation to respect those rights in everything we do.
PDPA Compliant
✅
Full Control in Your Hands
You have the right to access, correct, and in certain circumstances request the deletion of your personal data held by us. Such requests can be submitted to us at any time via live chat or email, and we will process them within the timeframe prescribed by the PDPA.
Your Full Rights
🎯
Minimum Necessary Data Collection
mbi23 only collects data that is strictly necessary to provide our services to you — nothing more. We do not gather irrelevant personal information purely for analytics unrelated to your experience on our platform.
Data Minimisation
🔔
Immediate Notification in the Event of an Incident
In the event of any security incident affecting your personal data, mbi23 is committed to notifying you within the timeframe required by law. We will never conceal security incidents or delay notifications to protect the company's reputation at the expense of our members.
Full Transparency
Policy Contents
1
Data We Collect
2
How We Use Your Data
3
Disclosure to Third Parties
4
Security & Data Protection
5
Data Retention Period
6
Cookies & Tracking Technologies
7
Your Rights
8
Child Protection
9
Privacy Policy Updates
10
Contact Us
Section 1
Personal Data We Collect

Mbi23 collects your personal data through several different channels — primarily when you register an account, make a deposit or withdrawal, contact customer support, or simply browse our platform. The following are the categories of data we collect:

Registration Data & Identity Verification:

  • Full name as stated on your Malaysian identity card
  • A valid and active Malaysian phone number
  • Email address (if provided)
  • Date of birth for age verification purposes (18 years and above)
  • Copy of identity card or passport (only for KYC verification purposes when required)

Transaction & Financial Data:

  • Deposit and withdrawal records including amounts, dates, and payment methods (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX)
  • Digital wallet account numbers or bank account numbers used for transactions (stored in encrypted form)
  • Betting history and game records within the platform

Technical & Usage Data:

  • The IP address of the device used to access the platform
  • Device type, operating system, and web browser used
  • Cookie and session data to ensure a smooth user experience
  • Activity logs within the platform, including pages visited and actions taken
Important Note: mbi23 never stores your PIN, digital wallet password, or online banking credentials. All payment transactions are processed securely through licensed third-party payment gateways, and we have no access to your financial account security details.
Section 2
How mbi23 Uses Your Personal Data

The personal data we collect is used solely for legitimate purposes directly related to delivering mbi23's services to you. The primary purposes are as follows:

  • Account Management: Creating and maintaining your mbi23 account, including processing registration, verifying your identity, and managing your account settings.
  • Transaction Processing: Processes deposits via your preferred Malaysian payment method and handles withdrawal of winnings to the same method.
  • Security & Fraud Prevention: Monitoring account activity to detect and prevent fraud, money laundering, and other suspicious activity.
  • Legal Compliance: Fulfilling legal obligations, including PDPA requirements, reporting to authorities where required by law, and retaining records for the prescribed periods.
  • Customer Service: Handling enquiries, complaints, and support requests you submit via live chat or email to mbi23.
  • Platform Improvements: Analysing aggregated usage data (not individual personal data) to understand usage patterns and improve the mbi23 platform experience.
  • Account-Related Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and terms updates — these are not marketing communications and cannot be unsubscribed from, as they are essential to your account security.
About Marketing Communications: mbi23 may send you information about promotions, bonuses, and the latest offers if you have agreed to receive them during registration or through your account settings. You can unsubscribe from marketing communications at any time via the link included in every email or through your account settings.
Section 3
Disclosure of Data to Third Parties

Mbi23 is committed to ensuring your personal data will never be sold or shared with third parties for marketing purposes. That said, there are limited situations in the course of operating the platform where we may need to share certain data with trusted third parties:

  • Payment Service Providers: Transaction information required to process your deposits and withdrawals is shared with licensed payment gateways, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. All of these providers are bound by strict confidentiality agreements.
  • Identity Verification Services: In cases where KYC verification is required, identification data may be shared with licensed identity verification service providers — strictly for the purposes of that verification only.
  • Relevant Authorities: mbi23 will disclose personal data to the relevant authorities where required by court order, regulatory directive, or applicable Malaysian law — including in cases involving financial crime investigations or money laundering.
  • Technical Service Providers: Cloud infrastructure and technology providers that help us operate the mbi23 platform may have limited access to data in the course of providing their technical services — they are bound by strict data protection agreements.

In all of the above cases, mbi23 ensures that any third party receiving your personal data is bound by privacy protections equivalent to our own standards. We do not permit any third party to use your data for purposes beyond what has been agreed.

Section 4
Security & Data Protection at mbi23

Mbi23 continuously invests in security technologies and processes to protect your personal data from unauthorised access, loss, alteration, or inadvertent disclosure. The key security measures we have in place include:

  • 256-bit SSL Encryption: All communications between your browser and mbi23's servers are encrypted using the latest TLS protocol. You can verify this by looking for the padlock icon in your browser's address bar while using the platform.
  • Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using advanced encryption standards — meaning that even if someone were to gain physical access to the database, the data would be unreadable without the appropriate encryption key.
  • Internal Access Controls: Access to members' personal data within mbi23 is restricted to staff who genuinely need it to perform their roles. All access is logged and monitored.
  • Two-Factor Authentication: mbi23's internal systems that store member data are protected with multi-factor authentication to prevent unauthorised access by external parties.
  • Regular Security Audits: Independent security assessments are conducted periodically by qualified third parties to identify and address any security vulnerabilities before they can be exploited.
In the Event of a Security Incident: In the event of a data security breach affecting your personal information, mbi23 will notify you via your registered phone number or email within the timeframe stipulated by Malaysia's PDPA. We will clearly state the type of data affected, the steps we have taken, and the actions you can take to protect yourself.
Section 5
Personal Data Retention Period

Mbi23 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required to comply with legal obligations. The following are general retention guidelines by data category:

  • Active Account Data: For the duration your account remains active, plus an additional 7 years after account closure, to meet financial record-keeping requirements under Malaysian law.
  • Financial Transaction Records: A minimum of 7 years from the transaction date, in line with anti-money laundering (AML) compliance requirements and Malaysian tax laws.
  • Customer Support Records: 3 years from the date of interaction, to allow for the resolution of any disputes that may arise in connection with the services provided.
  • Technical Log Data: 12 months, used for technical troubleshooting and platform security analysis.
  • Marketing Data: Until you unsubscribe or request deletion, whichever comes first.

Once the retention period expires, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. This deletion process is permanent and irreversible.

Section 6
Cookies & Tracking Technologies

Mbi23 uses cookies and similar tracking technologies to keep our platform running smoothly and to deliver a better user experience. The types of cookies we use are as follows:

  • Essential Cookies: Required for core platform functionality, such as maintaining your login session and ensuring platform security. These cookies cannot be disabled as they are essential for the platform to operate.
  • Performance Cookies: Collects information on how you use the platform — such as the most frequently visited pages, time spent, and so on. This data is aggregated and does not identify you personally; it is used to improve platform performance.
  • Functional Cookies: Remembering your preferences and settings — such as your preferred language and display options — to deliver a more personalised experience.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to log in and use certain features on the mbi23 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

Note: mbi23 does not use third-party cookies for targeted advertising. We do not allow advertising networks to collect your personal data through our platform for the purpose of serving ads on other websites.
Section 7
Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by mbi23:

  • Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 days of receiving a complete request.
  • Right to Rectification: If the personal data we hold is inaccurate or out of date, you have the right to request a correction. You may also update certain information directly through your account settings.
  • Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while we investigate the accuracy of data you have disputed.
  • Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. This does not affect the validity of any processing that took place prior to the withdrawal.
  • Right to Lodge a Complaint: If you believe mbi23 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To submit any request relating to the rights above, please contact us by email at support@mbi23.xyz with the subject line "Privacy Rights Request" and clearly state the nature of your request. We will verify your identity before processing any request involving personal data.

Section 8
Child Protection

The mbi23 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we discover that personal data has been collected from a minor without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and close the associated account.

If You Suspect Underage Registration: If you are a parent or guardian and believe your underage child has registered an account on mbi23, please contact us immediately at support@mbi23.xyz. We will handle the matter promptly and in strict confidence.

Mbi23 uses multiple mechanisms to prevent underage registration, including verification of a valid Malaysian phone number, date of birth verification at the point of registration, and KYC checks for withdrawals above certain thresholds. We take this responsibility to protect minors very seriously.

Section 9
Changes to This Privacy Policy

Mbi23 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology improvements. When significant changes are made, we will take the following steps to ensure you are informed:

  • Updating the "Last updated" date at the top of this page.
  • Notifying all active members via their registered phone number or email whenever there are significant changes to how we use your personal data.
  • A clear change notice will be displayed on the mbi23 platform for a minimum of 14 days after the changes take effect.

Continued use of the mbi23 platform after any Privacy Policy changes take effect will be considered acceptance of the updated policy. If you do not agree with any of the changes, you may contact us to discuss your options, including account closure and the return of any eligible balance.

Section 10
How to Contact Us About Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or how mbi23 handles your personal data, we encourage you to reach out to us through the following channels:

  • Privacy Email: support@mbi23.xyz — use the subject line "Privacy Enquiry" to ensure your email reaches the right team promptly.
  • Live Chat: Available on the mbi23 platform 24 hours a day, 7 days a week. Ideal for general privacy-related enquiries that need an immediate response.

Our data protection team will handle your enquiry with full professionalism and confidentiality. We are committed to responding within 5 business days for privacy-related enquiries, and within 21 days for formal requests relating to data subject rights under the PDPA.

Correspondence Address: For official requests that must be submitted in writing, please contact us first via email at support@mbi23.xyz to obtain our current office address.

A Summary of Your Privacy Rights at mbi23

A quick overview of the rights you have and how to exercise them

Right to Data Access
Request a copy of all personal data we hold about you. Processed within 21 days of your identity being verified.
Right to Rectification
Request corrections to inaccurate or outdated data. Some information can be updated directly in your account settings.
Right to Restrict Processing
Request a temporary restriction on the processing of your data under certain circumstances provided for under Malaysia's PDPA.
Withdraw Consent
Withdraw your consent for specific types of processing at any time — including unsubscribing from marketing communications.
Right to Erasure
Under certain circumstances, request the deletion of your personal data. Subject to applicable legal record-keeping obligations.
Right to Lodge an Official Complaint
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Mbi23 Data Processing Schedule

Data Type Purpose of Collection Legal Basis Retention Period
Phone Number Account verification & communications Contract Account period + 7 years
Transaction Records Payment processing & AML compliance Legal 7 years
Betting History Game records & dispute resolution Contract 7 years
IP Address Security & fraud prevention Legitimate interests 12 months
Cookie Data Platform functionality & user experience Consent Until cookie expiry
KYC Documents Identity & age verification Legal Account period + 7 years

FAQ – mbi23 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection

No, absolutely not. mbi23 has never and will never sell, rent, or disclose your personal data to any third party for marketing or commercial purposes. Your data is used solely to provide and improve mbi23's services to you, to fulfil our legal obligations, and to process your financial transactions securely. This is a clear and unwavering commitment — not a marketing promise.

You may request deletion of your personal data by contacting us at support@mbi23.xyz. However, please be aware that certain limitations apply — mbi23 is required under Malaysian law to retain financial transaction records and account records for a minimum of 7 years to comply with anti-money laundering and taxation requirements. Data falling under this legal obligation cannot be deleted upon individual request, even after an account is closed. All other data not subject to such obligations can be fully deleted upon your request.

All payment transactions at mbi23 — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — are processed through licensed third-party payment gateways that comply with PCI-DSS (Payment Card Industry Data Security Standard). This means mbi23 does not store your PIN, digital wallet password, or bank account security details directly in our systems. We only retain the information needed to identify the payment method you use for withdrawal processing purposes — and this information is stored in encrypted form.

The 256-bit SSL encryption used by mbi23 means all communication between your device and our servers is encrypted — even when you're on public Wi-Fi. Others on the same network cannot read the data transmitted between you and mbi23. That said, we still recommend exercising caution when using public Wi-Fi for sensitive activities — keep your screen away from prying eyes, and always log out of your mbi23 account when you're done, especially on shared devices or public networks.

Under Malaysia's PDPA, mbi23 is obligated to respond to data access requests within 21 days of receiving a complete request along with satisfactory identity verification. In practice, we aim to respond sooner than that. For straightforward requests, you may receive a response within 5–7 business days. For more complex requests requiring data to be gathered from multiple systems, the full 21-day period may be needed. Please submit your request to support@mbi23.xyz with the subject line "Privacy Rights Request" and include your mbi23 account number to help us process it faster.

Terms & Conditions Related to This Privacy Policy

This Privacy Policy is to be read together with mbi23's Terms & Conditions. Both documents form the entire agreement between you and mbi23 regarding the use of the platform and the handling of personal data. In the event of any conflict between the Privacy Policy and the Terms & Conditions on matters of privacy, this Privacy Policy shall prevail.

Read Full Terms & Conditions
🛡️ A PLATFORM YOU CAN TRUST

Play at mbi23 with Confidence – Your Privacy is Always Protected

Register a free account today and enjoy a betting platform that is not only secure and entertaining — but also transparent about how we handle your personal data. A Welcome Bonus of up to RM 1,000 awaits you.

Register Now – It's Free Log In

Safe & Secure • For adults aged 18 and above only • Please gamble responsibly

Officially Licensed
SSL 256-bit
PDPA Compliant
24/7 Support
Instant Payments
Responsible
Bahasa Melayu